The human element of information security may be both the most pervasive and most difficult to mitigate. In recent years, the security community has begun to acknowledge this challenge and address it in the form of security training and other behavioral interventions. For an organization trying to improve it’s security practices, it is often hard to tell what is working and what isn’t. We can help.

We offer services for planning and running Randomized Control Trials (RCTs) for testing the effectiveness of behavioral interventions. This can help you establish confidence in your training and ensure return on your security investments.